plugin
3 known security issues reported for the Global Multisite Search WordPress plugin. Most recent disclosed Jun 30, 2021.
Running Global Multisite Search on your site? Check whether your installed version is affected.
Scan your site freeThe Global Multisite Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the wpgms_ajax_result_function function. This makes it possible for unauthenticated attackers to query and read content from multi...
The Global Multisite Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the wpgms_ajax_result_function function. This makes it possible for unauthenticated attackers to query and read content from multi...
The plugin does not properly check for CSRF in its wpgms_ajax_result_function AJAX action, allowing attacker to make logged in user call them it a CSRF attack
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free